hash-id-prototypes.json

[
    {
        "regex": "^[a-fA-F0-9]{4}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-16"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-16-CCITT"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "FCS-16"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{8}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Adler-32"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-32B"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "FCS-32"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "GHash-32-3"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "GHash-32-5"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "FNV-132"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Fletcher-32"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Joaat"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "ELF-32"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "XOR-32"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{6}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-24"
            }
        ]
    },
    {
        "regex": "^(\\$crc32\\$[a-fA-F0-9]{8}.)?[a-fA-F0-9]{8}$",
        "modes": [
            {
                "john": "crc32",
                "hashcat": null,
                "extended": false,
                "name": "CRC-32"
            }
        ]
    },
    {
        "regex": "^\\+[a-zA-Z0-9\\/.]{12}$",
        "modes": [
            {
                "john": "bfegg",
                "hashcat": null,
                "extended": false,
                "name": "Eggdrop IRC Bot"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9\\/.]{13}$",
        "modes": [
            {
                "john": "descrypt",
                "hashcat": 1500,
                "extended": false,
                "name": "DES(Unix)"
            },
            {
                "john": "descrypt",
                "hashcat": 1500,
                "extended": false,
                "name": "Traditional DES"
            },
            {
                "john": "descrypt",
                "hashcat": 1500,
                "extended": false,
                "name": "DEScrypt"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{16}$",
        "modes": [
            {
                "john": "mysql",
                "hashcat": 200,
                "extended": false,
                "name": "MySQL323"
            },
			{
                "john": "lm",
                "hashcat": 3000,
                "extended": false,
                "name": "LM"
            },
            {
                "john": null,
                "hashcat": 3100,
                "extended": false,
                "name": "DES(Oracle)"
            },
            {
                "john": null,
                "hashcat": 5100,
                "extended": false,
                "name": "Half MD5"
            },
            {
                "john": null,
                "hashcat": 3100,
                "extended": false,
                "name": "Oracle 7-10g"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "FNV-164"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-64"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9\\/.]{16}$",
        "modes": [
            {
                "john": "pix-md5",
                "hashcat": 2400,
                "extended": false,
                "name": "Cisco-PIX(MD5)"
            }
        ]
    },
    {
        "regex": "^\\([a-zA-Z0-9\\/+]{20}\\)$",
        "modes": [
            {
                "john": "dominosec",
                "hashcat": 8700,
                "extended": false,
                "name": "Lotus Notes/Domino 6"
            }
        ]
    },
    {
        "regex": "^_[a-zA-Z0-9\\/.]{19}$",
        "modes": [
            {
                "john": "bsdicrypt",
                "hashcat": null,
                "extended": false,
                "name": "BSDi Crypt"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{24}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CRC-96(ZIP)"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9\\/.]{24}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Crypt16"
            }
        ]
    },
    {
        "regex": "^(\\$md2\\$)?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "md2",
                "hashcat": null,
                "extended": false,
                "name": "MD2"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}(:.+)?$",
        "modes": [
            {
                "john": "raw-md5",
                "hashcat": 0,
                "extended": false,
                "name": "MD5"
            },
            {
                "john": "raw-md4",
                "hashcat": 900,
                "extended": false,
                "name": "MD4"
            },
            {
                "john": null,
                "hashcat": 2600,
                "extended": false,
                "name": "Double MD5"
            },
            {
                "john": "lm",
                "hashcat": 3000,
                "extended": false,
                "name": "LM"
            },
            {
                "john": "ripemd-128",
                "hashcat": null,
                "extended": false,
                "name": "RIPEMD-128"
            },
            {
                "john": "haval-128-4",
                "hashcat": null,
                "extended": false,
                "name": "Haval-128"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Tiger-128"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-256(128)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-512(128)"
            },
            {
                "john": "lotus5",
                "hashcat": 8600,
                "extended": false,
                "name": "Lotus Notes/Domino 5"
            },
            {
                "john": null,
                "hashcat": 23,
                "extended": false,
                "name": "Skype"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": true,
                "name": "ZipMonster"
            },
            {
                "john": null,
                "hashcat": 11000,
                "extended": true,
                "name": "PrestaShop"
            },
            {
                "john": null,
                "hashcat": 3500,
                "extended": true,
                "name": "md5(md5(md5($pass)))"
            },
            {
                "john": null,
                "hashcat": 4300,
                "extended": true,
                "name": "md5(strtoupper(md5($pass)))"
            },
            {
                "john": null,
                "hashcat": 4400,
                "extended": true,
                "name": "md5(sha1($pass))"
            },
            {
                "john": null,
                "hashcat": 10,
                "extended": true,
                "name": "md5($pass.$salt)"
            },
            {
                "john": null,
                "hashcat": 20,
                "extended": true,
                "name": "md5($salt.$pass)"
            },
            {
                "john": null,
                "hashcat": 30,
                "extended": true,
                "name": "md5(unicode($pass).$salt)"
            },
            {
                "john": null,
                "hashcat": 40,
                "extended": true,
                "name": "md5($salt.unicode($pass))"
            },
            {
                "john": "hmac-md5",
                "hashcat": 50,
                "extended": true,
                "name": "HMAC-MD5 (key = $pass)"
            },
            {
                "john": "hmac-md5",
                "hashcat": 60,
                "extended": true,
                "name": "HMAC-MD5 (key = $salt)"
            },
            {
                "john": null,
                "hashcat": 3610,
                "extended": true,
                "name": "md5(md5($salt).$pass)"
            },
            {
                "john": null,
                "hashcat": 3710,
                "extended": true,
                "name": "md5($salt.md5($pass))"
            },
            {
                "john": null,
                "hashcat": 3720,
                "extended": true,
                "name": "md5($pass.md5($salt))"
            },
            {
                "john": null,
                "hashcat": 3810,
                "extended": true,
                "name": "md5($salt.$pass.$salt)"
            },
            {
                "john": null,
                "hashcat": 3910,
                "extended": true,
                "name": "md5(md5($pass).md5($salt))"
            },
            {
                "john": null,
                "hashcat": 4010,
                "extended": true,
                "name": "md5($salt.md5($salt.$pass))"
            },
            {
                "john": null,
                "hashcat": 4110,
                "extended": true,
                "name": "md5($salt.md5($pass.$salt))"
            },
            {
                "john": null,
                "hashcat": 4210,
                "extended": true,
                "name": "md5($username.0.$pass)"
            }
        ]
    },
    {
        "regex": "^(\\$snefru\\$)?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "snefru-128",
                "hashcat": null,
                "extended": false,
                "name": "Snefru-128"
            }
        ]
    },
    {
        "regex": "^(\\$NT\\$)?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "nt",
                "hashcat": 1000,
                "extended": false,
                "name": "NTLM"
            }
        ]
    },
    {
        "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?[a-fA-F0-9]{32}(:[^\\\\\\/:*?\"<>|]{1,20})?$",
        "modes": [
            {
                "john": "mscach",
                "hashcat": 1100,
                "extended": false,
                "name": "Domain Cached Credentials"
            }
        ]
    },
    {
        "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?(\\$DCC2\\$10240#[^\\\\\\/:*?\"<>|]{1,20}#)?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "mscach2",
                "hashcat": 2100,
                "extended": false,
                "name": "Domain Cached Credentials 2"
            }
        ]
    },
    {
        "regex": "^{SHA}[a-zA-Z0-9\\/+]{27}=$",
        "modes": [
            {
                "john": "nsldap",
                "hashcat": 101,
                "extended": false,
                "name": "SHA-1(Base64)"
            },
            {
                "john": "nsldap",
                "hashcat": 101,
                "extended": false,
                "name": "Netscape LDAP SHA"
            }
        ]
    },
    {
        "regex": "^\\$1\\$[a-za-zA-Z0-9\\/.]{0,8}\\$[a-za-zA-Z0-9\\/.]{22}(:.*)?$",
        "modes": [
            {
                "john": "md5crypt",
                "hashcat": 500,
                "extended": false,
                "name": "MD5 Crypt ($1$)"
            },
            {
                "john": "md5crypt",
                "hashcat": 500,
                "extended": false,
                "name": "Cisco-IOS(MD5 $1$)"
            },
            {
                "john": "md5crypt",
                "hashcat": 500,
                "extended": false,
                "name": "FreeBSD MD5 $1$"
            }
        ]
    },
    {
        "regex": "^0x[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Lineage II C4"
            }
        ]
    },
    {
        "regex": "^\\$H\\$[a-za-zA-Z0-9\\/.]{31}$",
        "modes": [
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "phpBB < v3.x"
            },
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "Wordpress v2.6.0/2.6.1"
            },
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "PHPass' Portable Hash"
            }
        ]
    },
    {
        "regex": "^\\$P\\$[a-za-zA-Z0-9\\/.]{31}$",
        "modes": [
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "Wordpress \u2265 v2.6.2"
            },
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "Joomla \u2265 v2.5.18"
            },
            {
                "john": "phpass",
                "hashcat": 400,
                "extended": false,
                "name": "PHPass' Portable Hash"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:[a-zA-Z0-9]{2}$",
        "modes": [
            {
                "john": null,
                "hashcat": 21,
                "extended": false,
                "name": "osCommerce"
            },
            {
                "john": null,
                "hashcat": 21,
                "extended": false,
                "name": "xt:Commerce"
            }
        ]
    },
    {
        "regex": "^\\$apr1\\$[a-za-zA-Z0-9\\/.]{0,8}\\$[a-za-zA-Z0-9\\/.]{22}$",
        "modes": [
            {
                "john": null,
                "hashcat": 1600,
                "extended": false,
                "name": "MD5(APR)"
            },
            {
                "john": null,
                "hashcat": 1600,
                "extended": false,
                "name": "Apache MD5"
            },
            {
                "john": null,
                "hashcat": 1600,
                "extended": true,
                "name": "md5apr1"
            }
        ]
    },
	{
        "regex": "^\\$ecryptfs\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 12200,
                "extended": false,
                "name": "eCryptfs"
            }
        ]
    },
	{
        "regex": "^\\$bitcoin",
        "modes": [
            {
                "john": null,
                "hashcat": 11300,
                "extended": false,
                "name": "Bitcoin/Litecoin wallet.dat"
            }
        ]
    },
	{
        "regex": "^\\$blockchain",
        "modes": [
            {
                "john": null,
                "hashcat": 12700,
                "extended": false,
                "name": "Blockchain My Wallet"
            }
        ]
    },
	{
        "regex": "^\\$(rar|RAR)(3|5)",
        "modes": [
            {
                "john": null,
                "hashcat": 12500,
                "extended": false,
                "name": "RAR archive"
            }
        ]
    },
	{
        "regex": "^\\$bitlocker\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 22100,
                "extended": false,
                "name": "BitLocker"
            }
        ]
    },
	{
        "regex": "^WPA\\*0(1|2)\\*",
        "modes": [
            {
                "john": null,
                "hashcat": 22000,
                "extended": false,
                "name": "WPA PBKDF2 (PMKID/EAPOL)"
            }
        ]
    },
	{
        "regex": "^\\$itunes_backup\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 14700,
                "extended": false,
                "name": "iTunes Backup"
            }
        ]
    },
	{
        "regex": "^\\$keepass\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 14700,
                "extended": false,
                "name": "KeePass"
            }
        ]
    },
	{
        "regex": "^\\$chacha20\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 15400,
                "extended": false,
                "name": "Chacha 20"
            }
        ]
    },
	{
        "regex": "^\\$ethereum\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 15600,
                "extended": false,
                "name": "Ethereum Wallet"
            }
        ]
    },
	{
        "regex": "^\\$tacacs-plus\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 15600,
                "extended": false,
                "name": "TACACS+"
            }
        ]
    },
	{
        "regex": "^\\$electrum\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 16600,
                "extended": false,
                "name": "Electrum Wallet (Salt-Type 1-3)"
            }
        ]
    },
	{
        "regex": "^\\$ansible\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 16900,
                "extended": false,
                "name": "Ansible Vault"
            }
        ]
    },
	{
        "regex": "^\\$zip2\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 12500,
                "extended": false,
                "name": "ZIP archive (WinZip)"
            }
        ]
    },
	{
        "regex": "^\\$pkzip2\\$",
        "modes": [
            {
                "john": null,
                "hashcat": 17200,
                "extended": false,
                "name": "PKZIP Archive"
            }
        ]
    },
    {
        "regex": "^{smd5}[a-zA-Z0-9$\\/.]{31}$",
        "modes": [
            {
                "john": "aix-smd5",
                "hashcat": 6300,
                "extended": false,
                "name": "AIX(smd5)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": 3721,
                "extended": false,
                "name": "WebEdition CMS"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:.{5}$",
        "modes": [
            {
                "john": null,
                "hashcat": 2811,
                "extended": false,
                "name": "IP.Board \u2265 v2+"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:.{8}$",
        "modes": [
            {
                "john": null,
                "hashcat": 2811,
                "extended": false,
                "name": "MyBB \u2265 v1.2+"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9]{34}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CryptoCurrency(Adress)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{40}(:.+)?$",
        "modes": [
            {
                "john": "raw-sha1",
                "hashcat": 100,
                "extended": false,
                "name": "SHA-1"
            },
			{
                "john": "mysql-sha1",
                "hashcat": 300,
                "extended": false,
                "name": "MySQL5.x"
            },
			{
                "john": "mysql-sha1",
                "hashcat": 300,
                "extended": false,
                "name": "MySQL4.1"
            },
            {
                "john": null,
                "hashcat": 4500,
                "extended": false,
                "name": "Double SHA-1"
            },
            {
                "john": "ripemd-160",
                "hashcat": 6000,
                "extended": false,
                "name": "RIPEMD-160"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Haval-160"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Tiger-160"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "HAS-160"
            },
            {
                "john": "raw-sha1-linkedin",
                "hashcat": 190,
                "extended": false,
                "name": "LinkedIn"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-256(160)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-512(160)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": true,
                "name": "MangosWeb Enhanced CMS"
            },
            {
                "john": null,
                "hashcat": 4600,
                "extended": true,
                "name": "sha1(sha1(sha1($pass)))"
            },
            {
                "john": null,
                "hashcat": 4700,
                "extended": true,
                "name": "sha1(md5($pass))"
            },
            {
                "john": null,
                "hashcat": 110,
                "extended": true,
                "name": "sha1($pass.$salt)"
            },
            {
                "john": null,
                "hashcat": 120,
                "extended": true,
                "name": "sha1($salt.$pass)"
            },
            {
                "john": null,
                "hashcat": 130,
                "extended": true,
                "name": "sha1(unicode($pass).$salt)"
            },
            {
                "john": null,
                "hashcat": 140,
                "extended": true,
                "name": "sha1($salt.unicode($pass))"
            },
            {
                "john": "hmac-sha1",
                "hashcat": 150,
                "extended": true,
                "name": "HMAC-SHA1 (key = $pass)"
            },
            {
                "john": "hmac-sha1",
                "hashcat": 160,
                "extended": true,
                "name": "HMAC-SHA1 (key = $salt)"
            },
            {
                "john": null,
                "hashcat": 4710,
                "extended": true,
                "name": "sha1($salt.$pass.$salt)"
            }
        ]
    },
    {
        "regex": "^\\*[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": "mysql-sha1",
                "hashcat": 300,
                "extended": false,
                "name": "MySQL5.x"
            },
            {
                "john": "mysql-sha1",
                "hashcat": 300,
                "extended": false,
                "name": "MySQL4.1"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9]{43}$",
        "modes": [
            {
                "john": null,
                "hashcat": 5700,
                "extended": false,
                "name": "Cisco-IOS(SHA-256)"
            }
        ]
    },
    {
        "regex": "^{SSHA}[a-zA-Z0-9\\/+]{38}==$",
        "modes": [
            {
                "john": "nsldaps",
                "hashcat": 111,
                "extended": false,
                "name": "SSHA-1(Base64)"
            },
            {
                "john": "nsldaps",
                "hashcat": 111,
                "extended": false,
                "name": "Netscape LDAP SSHA"
            },
            {
                "john": "nsldaps",
                "hashcat": 111,
                "extended": true,
                "name": "nsldaps"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9=]{47}$",
        "modes": [
            {
                "john": "fortigate",
                "hashcat": 7000,
                "extended": false,
                "name": "Fortigate(FortiOS)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{48}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Haval-192"
            },
            {
                "john": "tiger",
                "hashcat": null,
                "extended": false,
                "name": "Tiger-192"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "SHA-1(Oracle)"
            },
            {
                "john": "xsha",
                "hashcat": 122,
                "extended": false,
                "name": "OSX v10.4"
            },
            {
                "john": "xsha",
                "hashcat": 122,
                "extended": false,
                "name": "OSX v10.5"
            },
            {
                "john": "xsha",
                "hashcat": 122,
                "extended": false,
                "name": "OSX v10.6"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{51}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Palshop CMS"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9]{51}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "CryptoCurrency(PrivateKey)"
            }
        ]
    },
    {
        "regex": "^{ssha1}[0-9]{2}\\$[a-zA-Z0-9$\\/.]{44}$",
        "modes": [
            {
                "john": "aix-ssha1",
                "hashcat": 6700,
                "extended": false,
                "name": "AIX(ssha1)"
            }
        ]
    },
    {
        "regex": "^0x0100[a-fA-F0-9]{48}$",
        "modes": [
            {
                "john": "mssql05",
                "hashcat": 132,
                "extended": false,
                "name": "MSSQL(2005)"
            },
            {
                "john": "mssql05",
                "hashcat": 132,
                "extended": false,
                "name": "MSSQL(2008)"
            }
        ]
    },
    {
        "regex": "^(\\$md5,rounds=[0-9]+\\$|\\$md5\\$rounds=[0-9]+\\$|\\$md5\\$)[a-zA-Z0-9\\/.]{0,16}(\\$|\\$\\$)[a-zA-Z0-9\\/.]{22}$",
        "modes": [
            {
                "john": "sunmd5",
                "hashcat": 3300,
                "extended": false,
                "name": "Sun MD5 Crypt"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{56}$",
        "modes": [
            {
                "john": "raw-sha224",
                "hashcat": null,
                "extended": false,
                "name": "SHA-224"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Haval-224"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "SHA3-224"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-256(224)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-512(224)"
            }
        ]
    },
    {
        "regex": "^(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-za-zA-Z0-9\\/.]{53}$",
        "modes": [
            {
                "john": "bcrypt",
                "hashcat": 3200,
                "extended": false,
                "name": "Blowfish(OpenBSD)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Woltlab Burning Board 4.x"
            },
            {
                "john": "bcrypt",
                "hashcat": 3200,
                "extended": false,
                "name": "bcrypt"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{40}:[a-fA-F0-9]{16}$",
        "modes": [
            {
                "john": null,
                "hashcat": 5800,
                "extended": false,
                "name": "Android PIN"
            }
        ]
    },
    {
        "regex": "^(S:)?[a-fA-F0-9]{40}(:)?[a-fA-F0-9]{20}$",
        "modes": [
            {
                "john": "oracle11",
                "hashcat": 112,
                "extended": false,
                "name": "Oracle 11g/12c"
            }
        ]
    },
    {
        "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,[0-9]+\\$[a-zA-Z0-9\\/.]{22}\\$[a-zA-Z0-9\\/.]{31}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "bcrypt(SHA-256)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:.{3}$",
        "modes": [
            {
                "john": null,
                "hashcat": 2611,
                "extended": false,
                "name": "vBulletin < v3.8.5"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:.{30}$",
        "modes": [
            {
                "john": null,
                "hashcat": 2711,
                "extended": false,
                "name": "vBulletin \u2265 v3.8.5"
            }
        ]
    },
    {
        "regex": "^(\\$snefru\\$)?[a-fA-F0-9]{64}$",
        "modes": [
            {
                "john": "snefru-256",
                "hashcat": null,
                "extended": false,
                "name": "Snefru-256"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{64}(:.+)?$",
        "modes": [
            {
                "john": "raw-sha256",
                "hashcat": 1400,
                "extended": false,
                "name": "SHA-256"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "RIPEMD-256"
            },
            {
                "john": "haval-256-3",
                "hashcat": null,
                "extended": false,
                "name": "Haval-256"
            },
            {
                "john": "gost",
                "hashcat": 6900,
                "extended": false,
                "name": "GOST R 34.11-94"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "GOST CryptoPro S-Box"
            },
            {
                "john": "raw-keccak-256",
                "hashcat": 5000,
                "extended": false,
                "name": "SHA3-256"
            },
            {
                "john": "skein-256",
                "hashcat": null,
                "extended": false,
                "name": "Skein-256"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-512(256)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": true,
                "name": "Ventrilo"
            },
            {
                "john": null,
                "hashcat": 1410,
                "extended": true,
                "name": "sha256($pass.$salt)"
            },
            {
                "john": null,
                "hashcat": 1420,
                "extended": true,
                "name": "sha256($salt.$pass)"
            },
            {
                "john": null,
                "hashcat": 1430,
                "extended": true,
                "name": "sha256(unicode($pass).$salt)"
            },
            {
                "john": null,
                "hashcat": 1440,
                "extended": true,
                "name": "sha256($salt.unicode($pass))"
            },
            {
                "john": "hmac-sha256",
                "hashcat": 1450,
                "extended": true,
                "name": "HMAC-SHA256 (key = $pass)"
            },
            {
                "john": "hmac-sha256",
                "hashcat": 1460,
                "extended": true,
                "name": "HMAC-SHA256 (key = $salt)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:[a-zA-Z0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": 11,
                "extended": false,
                "name": "Joomla < v2.5.18"
            }
        ]
    },
    {
        "regex": "^[a-f-0-9]{32}:[a-f-0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "SAM(LM_Hash:NT_Hash)"
            }
        ]
    },
    {
        "regex": "^(\\$chap\\$0\\*)?[a-fA-F0-9]{32}[\\*:][a-fA-F0-9]{32}(:[0-9]{2})?$",
        "modes": [
            {
                "john": "chap",
                "hashcat": 4800,
                "extended": false,
                "name": "MD5(Chap)"
            },
            {
                "john": "chap",
                "hashcat": 4800,
                "extended": false,
                "name": "iSCSI CHAP Authentication"
            }
        ]
    },
    {
        "regex": "^\\$episerver\\$\\*0\\*[a-zA-Z0-9\\/=+]+\\*[a-zA-Z0-9\\/=+]{27,28}$",
        "modes": [
            {
                "john": "episerver",
                "hashcat": 141,
                "extended": false,
                "name": "EPiServer 6.x < v4"
            }
        ]
    },
    {
        "regex": "^{ssha256}[0-9]{2}\\$[a-zA-Z0-9$\\/.]{60}$",
        "modes": [
            {
                "john": "aix-ssha256",
                "hashcat": 6400,
                "extended": false,
                "name": "AIX(ssha256)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{80}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "RIPEMD-320"
            }
        ]
    },
    {
        "regex": "^\\$episerver\\$\\*1\\*[a-zA-Z0-9\\/=+]+\\*[a-zA-Z0-9\\/=+]{42,43}$",
        "modes": [
            {
                "john": "episerver",
                "hashcat": 1441,
                "extended": false,
                "name": "EPiServer 6.x \u2265 v4"
            }
        ]
    },
    {
        "regex": "^0x0100[a-fA-F0-9]{88}$",
        "modes": [
            {
                "john": "mssql",
                "hashcat": 131,
                "extended": false,
                "name": "MSSQL(2000)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{96}$",
        "modes": [
            {
                "john": "raw-sha384",
                "hashcat": 10800,
                "extended": false,
                "name": "SHA-384"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "SHA3-384"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-512(384)"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-1024(384)"
            }
        ]
    },
    {
        "regex": "^{SSHA512}[a-zA-Z0-9\\/+]{96}$",
        "modes": [
            {
                "john": "ssha512",
                "hashcat": 1711,
                "extended": false,
                "name": "SSHA-512(Base64)"
            },
            {
                "john": "ssha512",
                "hashcat": 1711,
                "extended": false,
                "name": "LDAP(SSHA-512)"
            }
        ]
    },
    {
        "regex": "^{ssha512}[0-9]{2}\\$[a-zA-Z0-9\\/.]{16,48}\\$[a-zA-Z0-9\\/.]{86}$",
        "modes": [
            {
                "john": "aix-ssha512",
                "hashcat": 6500,
                "extended": false,
                "name": "AIX(ssha512)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{128}(:.+)?$",
        "modes": [
            {
                "john": "raw-sha512",
                "hashcat": 1700,
                "extended": false,
                "name": "SHA-512"
            },
            {
                "john": "whirlpool",
                "hashcat": 6100,
                "extended": false,
                "name": "Whirlpool"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Salsa10"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Salsa20"
            },
            {
                "john": "raw-keccak",
                "hashcat": null,
                "extended": false,
                "name": "SHA3-512"
            },
            {
                "john": "skein-512",
                "hashcat": null,
                "extended": false,
                "name": "Skein-512"
            },
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-1024(512)"
            },
            {
                "john": null,
                "hashcat": 1710,
                "extended": true,
                "name": "sha512($pass.$salt)"
            },
            {
                "john": null,
                "hashcat": 1720,
                "extended": true,
                "name": "sha512($salt.$pass)"
            },
            {
                "john": null,
                "hashcat": 1730,
                "extended": true,
                "name": "sha512(unicode($pass).$salt)"
            },
            {
                "john": null,
                "hashcat": 1740,
                "extended": true,
                "name": "sha512($salt.unicode($pass))"
            },
            {
                "john": "hmac-sha512",
                "hashcat": 1750,
                "extended": true,
                "name": "HMAC-SHA512 (key = $pass)"
            },
            {
                "john": "hmac-sha512",
                "hashcat": 1760,
                "extended": true,
                "name": "HMAC-SHA512 (key = $salt)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{136}$",
        "modes": [
            {
                "john": "xsha512",
                "hashcat": 1722,
                "extended": false,
                "name": "OSX v10.7"
            }
        ]
    },
    {
        "regex": "^0x0200[a-fA-F0-9]{136}$",
        "modes": [
            {
                "john": "msql12",
                "hashcat": 1731,
                "extended": false,
                "name": "MSSQL(2012)"
            },
            {
                "john": "msql12",
                "hashcat": 1731,
                "extended": false,
                "name": "MSSQL(2014)"
            }
        ]
    },
    {
        "regex": "^\\$ml\\$[0-9]+\\$[a-fA-F0-9]{64}\\$[a-fA-F0-9]{128}$",
        "modes": [
            {
                "john": "pbkdf2-hmac-sha512",
                "hashcat": 7100,
                "extended": false,
                "name": "OSX v10.8"
            },
            {
                "john": "pbkdf2-hmac-sha512",
                "hashcat": 7100,
                "extended": false,
                "name": "OSX v10.9"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{256}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Skein-1024"
            }
        ]
    },
    {
        "regex": "^grub\\.pbkdf2\\.sha512\\.[0-9]+\\.([a-fA-F0-9]{128,2048}\\.|[0-9]+\\.)?[a-fA-F0-9]{128}$",
        "modes": [
            {
                "john": null,
                "hashcat": 7200,
                "extended": false,
                "name": "GRUB 2"
            }
        ]
    },
    {
        "regex": "^sha1\\$[a-zA-Z0-9]+\\$[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": null,
                "hashcat": 124,
                "extended": false,
                "name": "Django(SHA-1)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{49}$",
        "modes": [
            {
                "john": "citrix_ns10",
                "hashcat": 8100,
                "extended": false,
                "name": "Citrix Netscaler"
            }
        ]
    },
    {
        "regex": "^\\$S\\$[a-za-zA-Z0-9\\/.]{52}$",
        "modes": [
            {
                "john": "drupal7",
                "hashcat": 7900,
                "extended": false,
                "name": "Drupal > v7.x"
            }
        ]
    },
    {
        "regex": "^\\$5\\$(rounds=[0-9]+\\$)?[a-zA-Z0-9\\/.]{0,16}\\$[a-zA-Z0-9\\/.]{43}$",
        "modes": [
            {
                "john": "sha256crypt",
                "hashcat": 7400,
                "extended": false,
                "name": "SHA-256 Crypt"
            }
        ]
    },
    {
        "regex": "^0x[a-fA-F0-9]{4}[a-fA-F0-9]{16}[a-fA-F0-9]{64}$",
        "modes": [
            {
                "john": "sybasease",
                "hashcat": 8000,
                "extended": false,
                "name": "Sybase ASE"
            }
        ]
    },
    {
        "regex": "^\\$6\\$(rounds=[0-9]+\\$)?[a-zA-Z0-9\\/.]{0,16}\\$[a-zA-Z0-9\\/.]{86}$",
        "modes": [
            {
                "john": "sha512crypt",
                "hashcat": 1800,
                "extended": false,
                "name": "SHA-512 Crypt"
            }
        ]
    },
    {
        "regex": "^\\$sha\\$[a-zA-Z0-9]{1,16}\\$([a-fA-F0-9]{32}|[a-fA-F0-9]{40}|[a-fA-F0-9]{64}|[a-fA-F0-9]{128}|[a-fA-F0-9]{140})$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Minecraft(AuthMe Reloaded)"
            }
        ]
    },
    {
        "regex": "^sha256\\$[a-zA-Z0-9]+\\$[a-fA-F0-9]{64}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(SHA-256)"
            }
        ]
    },
    {
        "regex": "^sha384\\$[a-zA-Z0-9]+\\$[a-fA-F0-9]{96}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(SHA-384)"
            }
        ]
    },
    {
        "regex": "^crypt1:[a-zA-Z0-9+=]{12}:[a-zA-Z0-9+=]{12}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Clavister Secure Gateway"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{112}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Cisco VPN Client(PCF-File)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{1329}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Microsoft MSTSC(RDP-File)"
            }
        ]
    },
    {
        "regex": "^[^\\\\\\/:*?\"<>|]{1,20}[:]{2,3}([^\\\\\\/:*?\"<>|]{1,20})?:[a-fA-F0-9]{48}:[a-fA-F0-9]{48}:[a-fA-F0-9]{16}$",
        "modes": [
            {
                "john": "netntlm",
                "hashcat": 5500,
                "extended": false,
                "name": "NetNTLMv1-VANILLA / NetNTLMv1+ESS"
            }
        ]
    },
    {
        "regex": "^([^\\\\\\/:*?\"<>|]{1,20}\\\\)?[^\\\\\\/:*?\"<>|]{1,20}[:]{2,3}([^\\\\\\/:*?\"<>|]{1,20}:)?[^\\\\\\/:*?\"<>|]{1,20}:[a-fA-F0-9]{32}:[a-fA-F0-9]+$",
        "modes": [
            {
                "john": "netntlmv2",
                "hashcat": 5600,
                "extended": false,
                "name": "NetNTLMv2"
            }
        ]
    },
    {
        "regex": "^\\$(krb5pa|mskrb5)\\$([0-9]{2})?\\$.+\\$[a-fA-F0-9]{1,}$",
        "modes": [
            {
                "john": "krb5pa-md5",
                "hashcat": 7500,
                "extended": false,
                "name": "Kerberos 5 AS-REQ Pre-Auth"
            }
        ]
    },
	{
        "regex": "^\\$(krb5tgs)\\$([0-9]{2})?\\$.+\\$[a-fA-F0-9]{1,}$",
        "modes": [
            {
                "john": "",
                "hashcat": 13100,
                "extended": false,
                "name": "Kerberos 5 TGS-REP etype 23"
            }
        ]
    },
    {
        "regex": "^\\$scram\\$[0-9]+\\$[a-zA-Z0-9\\/.]{16}\\$sha-1=[a-zA-Z0-9\\/.]{27},sha-256=[a-zA-Z0-9\\/.]{43},sha-512=[a-zA-Z0-9\\/.]{86}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "SCRAM Hash"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{40}:[a-fA-F0-9]{0,32}$",
        "modes": [
            {
                "john": null,
                "hashcat": 7600,
                "extended": false,
                "name": "Redmine Project Management Web App"
            }
        ]
    },
    {
        "regex": "^(.+)?\\$[a-fA-F0-9]{16}$",
        "modes": [
            {
                "john": "sapb",
                "hashcat": 7700,
                "extended": false,
                "name": "SAP CODVN B (BCODE)"
            }
        ]
    },
    {
        "regex": "^(.+)?\\$[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": "sapg",
                "hashcat": 7800,
                "extended": false,
                "name": "SAP CODVN F/G (PASSCODE)"
            }
        ]
    },
    {
        "regex": "^(.+\\$)?[a-zA-Z0-9\\/.+]{30}(:.+)?$",
        "modes": [
            {
                "john": "md5ns",
                "hashcat": 22,
                "extended": false,
                "name": "Juniper Netscreen/SSG(ScreenOS)"
            }
        ]
    },
    {
        "regex": "^0x[a-fA-F0-9]{60}\\s0x[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": null,
                "hashcat": 123,
                "extended": false,
                "name": "EPi"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{40}:[^*]{1,25}$",
        "modes": [
            {
                "john": null,
                "hashcat": 121,
                "extended": false,
                "name": "SMF \u2265 v1.1"
            }
        ]
    },
    {
        "regex": "^(\\$wbb3\\$\\*1\\*)?[a-fA-F0-9]{40}[:*][a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": "wbb3",
                "hashcat": 8400,
                "extended": false,
                "name": "Woltlab Burning Board 3.x"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{130}(:[a-fA-F0-9]{40})?$",
        "modes": [
            {
                "john": null,
                "hashcat": 7300,
                "extended": false,
                "name": "IPMI2 RAKP HMAC-SHA1"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{32}:[0-9]+:[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\\.[a-zA-Z0-9-.]+$",
        "modes": [
            {
                "john": null,
                "hashcat": 6800,
                "extended": false,
                "name": "Lastpass"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9\\/.]{16}([:$].{1,})?$",
        "modes": [
            {
                "john": "asa-md5",
                "hashcat": 2410,
                "extended": false,
                "name": "Cisco-ASA(MD5)"
            },
			{
                "john": "",
                "hashcat": 14000,
                "extended": false,
                "name": "DES"
            },
			{
                "john": "",
                "hashcat": 14100,
                "extended": false,
                "name": "3DES"
            }
        ]
    },
    {
        "regex": "^\\$vnc\\$\\*[a-fA-F0-9]{32}\\*[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "vnc",
                "hashcat": null,
                "extended": false,
                "name": "VNC"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9]{32}(:([a-zA-Z0-9-]+\\.)?[a-zA-Z0-9-.]+\\.[a-z]{2,7}:.+:[0-9]+)?$",
        "modes": [
            {
                "john": null,
                "hashcat": 8300,
                "extended": false,
                "name": "DNSSEC(NSEC3)"
            }
        ]
    },
    {
        "regex": "^(user-.+:)?\\$racf\\$\\*.+\\*[a-fa-fA-F0-9]{16}$",
        "modes": [
            {
                "john": "racf",
                "hashcat": 8500,
                "extended": false,
                "name": "RACF"
            }
        ]
    },
    {
        "regex": "^\\$3\\$\\$[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "NTHash(FreeBSD Variant)"
            }
        ]
    },
    {
        "regex": "^\\$sha1\\$[0-9]+\\$[a-zA-Z0-9\\/.]{0,64}\\$[a-zA-Z0-9\\/.]{28}$",
        "modes": [
            {
                "john": "sha1crypt",
                "hashcat": null,
                "extended": false,
                "name": "SHA-1 Crypt"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{70}$",
        "modes": [
            {
                "john": "hmailserver",
                "hashcat": 1421,
                "extended": false,
                "name": "hMailServer"
            }
        ]
    },
    {
        "regex": "^[:\\$][AB][:\\$]([a-fA-F0-9]{1,8}[:\\$])?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "mediawiki",
                "hashcat": 3711,
                "extended": false,
                "name": "MediaWiki"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{140}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Minecraft(xAuth)"
            }
        ]
    },
    {
        "regex": "^\\$pbkdf2(-sha1)?\\$[0-9]+\\$[a-zA-Z0-9\\/.]+\\$[a-zA-Z0-9\\/.]{27}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2-SHA1(Generic)"
            }
        ]
    },
    {
        "regex": "^\\$pbkdf2-sha256\\$[0-9]+\\$[a-zA-Z0-9\\/.]+\\$[a-zA-Z0-9\\/.]{43}$",
        "modes": [
            {
                "john": "pbkdf2-hmac-sha256",
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2-SHA256(Generic)"
            }
        ]
    },
    {
        "regex": "^\\$pbkdf2-sha512\\$[0-9]+\\$[a-zA-Z0-9\\/.]+\\$[a-zA-Z0-9\\/.]{86}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2-SHA512(Generic)"
            }
        ]
    },
    {
        "regex": "^\\$p5k2\\$[0-9]+\\$[a-zA-Z0-9\\/+=-]+\\$[a-zA-Z0-9\\/+-]{27}=$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2(Cryptacular)"
            }
        ]
    },
    {
        "regex": "^\\$p5k2\\$[0-9]+\\$[a-zA-Z0-9\\/.]+\\$[a-zA-Z0-9\\/.]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2(Dwayne Litzenberger)"
            }
        ]
    },
    {
        "regex": "^{FSHP[0123]\\|[0-9]+\\|[0-9]+}[a-zA-Z0-9\\/+=]+$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Fairly Secure Hashed Password"
            }
        ]
    },
    {
        "regex": "^\\$PHPS\\$.+\\$[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "phps",
                "hashcat": 2612,
                "extended": false,
                "name": "PHPS"
            }
        ]
    },
    {
        "regex": "^[0-9]{4}:[a-fA-F0-9]{16}:[a-fA-F0-9]{2080}$",
        "modes": [
            {
                "john": null,
                "hashcat": 6600,
                "extended": false,
                "name": "1Password(Agile Keychain)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{64}:[a-fA-F0-9]{32}:[0-9]{5}:[a-fA-F0-9]{608}$",
        "modes": [
            {
                "john": null,
                "hashcat": 8200,
                "extended": false,
                "name": "1Password(Cloud Keychain)"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{256}:[a-fA-F0-9]{256}:[a-fA-F0-9]{16}:[a-fA-F0-9]{16}:[a-fA-F0-9]{320}:[a-fA-F0-9]{16}:[a-fA-F0-9]{40}:[a-fA-F0-9]{40}:[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": 5300,
                "extended": false,
                "name": "IKE-PSK MD5"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{256}:[a-fA-F0-9]{256}:[a-fA-F0-9]{16}:[a-fA-F0-9]{16}:[a-fA-F0-9]{320}:[a-fA-F0-9]{16}:[a-fA-F0-9]{40}:[a-fA-F0-9]{40}:[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": null,
                "hashcat": 5400,
                "extended": false,
                "name": "IKE-PSK SHA1"
            }
        ]
    },
    {
        "regex": "^[a-zA-Z0-9\\/+]{27}=$",
        "modes": [
            {
                "john": null,
                "hashcat": 133,
                "extended": false,
                "name": "PeopleSoft"
            }
        ]
    },
    {
        "regex": "^crypt\\$[a-fA-F0-9]{5}\\$[a-zA-Z0-9\\/.]{13}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(DES Crypt Wrapper)"
            }
        ]
    },
    {
        "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$[0-9]+\\$[a-za-zA-Z0-9]+\\$[a-za-zA-Z0-9\\/+=]{44}$",
        "modes": [
            {
                "john": "django",
                "hashcat": 10000,
                "extended": false,
                "name": "Django (PBKDF2-HMAC-SHA256)"
            }
        ]
    },
    {
        "regex": "^pbkdf2_sha1\\$[0-9]+\\$[a-zA-Z0-9]+\\$[a-zA-Z0-9\\/+=]{28}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(PBKDF2-HMAC-SHA1)"
            }
        ]
    },
    {
        "regex": "^bcrypt(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-zA-Z0-9\\/.]{53}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(bcrypt)"
            }
        ]
    },
    {
        "regex": "^md5\\$[a-fA-F0-9]+\\$[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(MD5)"
            }
        ]
    },
    {
        "regex": "^\\{PKCS5S2\\}[a-zA-Z0-9\\/+]{64}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PBKDF2(Atlassian)"
            }
        ]
    },
    {
        "regex": "^md5[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "PostgreSQL MD5"
            }
        ]
    },
    {
        "regex": "^\\([a-zA-Z0-9\\/+]{49}\\)$",
        "modes": [
            {
                "john": null,
                "hashcat": 9100,
                "extended": false,
                "name": "Lotus Notes/Domino 8"
            }
        ]
    },
    {
        "regex": "^SCRYPT:[0-9]{1,}:[0-9]{1}:[0-9]{1}:[a-za-zA-Z0-9:\\/+=]{1,}$",
        "modes": [
            {
                "john": null,
                "hashcat": 8900,
                "extended": false,
                "name": "scrypt"
            }
        ]
    },
    {
        "regex": "^\\$8\\$[a-za-zA-Z0-9\\/.]{14}\\$[a-za-zA-Z0-9\\/.]{43}$",
        "modes": [
            {
                "john": "cisco8",
                "hashcat": 9200,
                "extended": false,
                "name": "Cisco Type 8"
            }
        ]
    },
    {
        "regex": "^\\$9\\$[a-za-zA-Z0-9\\/.]{14}\\$[a-za-zA-Z0-9\\/.]{43}$",
        "modes": [
            {
                "john": "cisco9",
                "hashcat": 9300,
                "extended": false,
                "name": "Cisco Type 9"
            }
        ]
    },
    {
        "regex": "^\\$office\\$\\*2007\\*[0-9]{2}\\*[0-9]{3}\\*[0-9]{2}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{40}$",
        "modes": [
            {
                "john": "office",
                "hashcat": 9400,
                "extended": false,
                "name": "Microsoft Office 2007"
            }
        ]
    },
    {
        "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{64}$",
        "modes": [
            {
                "john": null,
                "hashcat": 9500,
                "extended": false,
                "name": "Microsoft Office 2010"
            }
        ]
    },
    {
        "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{32}\\*[a-zA-Z0-9]{64}$",
        "modes": [
            {
                "john": null,
                "hashcat": 9600,
                "extended": false,
                "name": "Microsoft Office 2013"
            }
        ]
    },
    {
        "regex": "^\\$fde\\$[0-9]{2}\\$[a-fA-F0-9]{32}\\$[0-9]{2}\\$[a-fA-F0-9]{32}\\$[a-fA-F0-9]{3072}$",
        "modes": [
            {
                "john": "fde",
                "hashcat": 8800,
                "extended": false,
                "name": "Android FDE \u2264 4.3"
            }
        ]
    },
    {
        "regex": "^\\$oldoffice\\$[01]\\*[a-fA-F0-9]{32}\\*[a-fA-F0-9]{32}\\*[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "oldoffice",
                "hashcat": 9700,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (MD5+RC4)"
            },
            {
                "john": "oldoffice",
                "hashcat": 9710,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (MD5+RC4) collider-mode #1"
            },
            {
                "john": "oldoffice",
                "hashcat": 9720,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (MD5+RC4) collider-mode #2"
            }
        ]
    },
    {
        "regex": "^\\$oldoffice\\$[34]\\*[a-fA-F0-9]{32}\\*[a-fA-F0-9]{32}\\*[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": null,
                "hashcat": 9800,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (SHA1+RC4)"
            },
            {
                "john": null,
                "hashcat": 9810,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1"
            },
            {
                "john": null,
                "hashcat": 9820,
                "extended": false,
                "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2"
            }
        ]
    },
    {
        "regex": "^(\\$radmin2\\$)?[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "radmin",
                "hashcat": 9900,
                "extended": false,
                "name": "RAdmin v2.x"
            }
        ]
    },
    {
        "regex": "^{x-issha,\\s[0-9]{4}}[a-za-zA-Z0-9\\/+=]+$",
        "modes": [
            {
                "john": "saph",
                "hashcat": 10300,
                "extended": false,
                "name": "SAP CODVN H (PWDSALTEDHASH) iSSHA-1"
            }
        ]
    },
    {
        "regex": "^\\$cram_md5\\$[a-za-zA-Z0-9\\/+=-]+\\$[a-za-zA-Z0-9\\/+=-]{52}$",
        "modes": [
            {
                "john": null,
                "hashcat": 10200,
                "extended": false,
                "name": "CRAM-MD5"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{16}:2:4:[a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": null,
                "hashcat": 10100,
                "extended": false,
                "name": "SipHash"
            }
        ]
    },
    {
        "regex": "^[a-fA-F0-9]{4,}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": true,
                "name": "Cisco Type 7"
            }
        ]
    },
    {
        "regex": "^(\\$cisco4\\$)?[a-zA-Z0-9\\/.]{43}$",
        "modes": [
            {
                "john": "cisco4",
                "hashcat": null,
                "extended": false,
                "name": "Cisco Type 4"
            }
        ]
    },
    {
        "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$[0-9]+\\$[a-zA-Z0-9\\/.]{53}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Django(bcrypt-SHA256)"
            }
        ]
    },
    {
        "regex": "^\\$postgres\\$.[^\\*]+[*:][a-fA-F0-9]{1,32}[*:][a-fA-F0-9]{32}$",
        "modes": [
            {
                "john": "postgres",
                "hashcat": 11100,
                "extended": false,
                "name": "PostgreSQL Challenge-Response Authentication (MD5)"
            }
        ]
    },
    {
        "regex": "^\\$siemens-s7\\$[0-9]{1}\\$[a-fA-F0-9]{40}\\$[a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": "siemens-s7",
                "hashcat": null,
                "extended": false,
                "name": "Siemens-S7"
            }
        ]
    },
    {
        "regex": "^(\\$pst\\$)?[a-fA-F0-9]{8}$",
        "modes": [
            {
                "john": null,
                "hashcat": null,
                "extended": false,
                "name": "Microsoft Outlook PST"
            }
        ]
    },
    {
        "regex": "^sha256[:$][0-9]+[:$][a-zA-Z0-9\\/+]+[:$][a-zA-Z0-9\\/+]{32,128}$",
        "modes": [
            {
                "john": null,
                "hashcat": 10900,
                "extended": false,
                "name": "PBKDF2-HMAC-SHA256(PHP)"
            }
        ]
    },
    {
        "regex": "^(\\$dahua\\$)?[a-zA-Z0-9]{8}$",
        "modes": [
            {
                "john": "dahua",
                "hashcat": null,
                "extended": false,
                "name": "Dahua"
            }
        ]
    },
    {
        "regex": "^\\$mysqlna\\$[a-fA-F0-9]{40}[:*][a-fA-F0-9]{40}$",
        "modes": [
            {
                "john": null,
                "hashcat": 11200,
                "extended": false,
                "name": "MySQL Challenge-Response Authentication (SHA1)"
            }
        ]
    },
    {
        "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9-]{1,5}\\*1\\*(16|32)\\*[a-fA-F0-9]{32,64}\\*32\\*[a-fA-F0-9]{64}\\*(8|16|32)\\*[a-fA-F0-9]{16,64}$",
        "modes": [
            {
                "john": "pdf",
                "hashcat": 10500,
                "extended": false,
                "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)"
            }
        ]
    }
]